Description
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Citrix Session Recording | Citrix / Citrix Session Recording | >= 1912 LTSR, < CU9 hotfix 19.12.9100.6 | affected |
| Citrix Session Recording | Citrix / Citrix Session Recording | >= 2203 LTSR, < CU5 hotfix 22.03.5100.11 | affected |
| Citrix Session Recording | Citrix / Citrix Session Recording | >= 2402 LTSR, < CU1 hotfix 24.02.1200.16 | affected |
| Citrix Session Recording | Citrix / Citrix Session Recording | >= 2407 Current Release, < 24.5.200.8 | affected |